URL now fully encoded

Checkpoint: we are now correctly able to click on a URL and get the
validated personId and email address from it.