URLEncode cookie values

Otherwise the syntax makes the cookie unreadable, preventing enabling multiple features.

I naively thought the scalatra cookies were encoded by default. I was wrong.