URI.encode @roles

This enables support for roles with spaces in the names.