always use x-www-form-url to encode the parameters of authentication-requests. preserve/restore original encoding.