use go-querystring for constructing URLs

this only updates a few user and repo functions just to establish the
calling pattern.  closes #56 (which also includes a little more
background)