Changed how the Fever API endpoint is generated in Fever::hook_prefs_tab...

Small patch for the prefs section. Prevents a potential XSS when using unescape REQUEST_URI. URI is now generated using TT-RSS internal function.