encode query string, not url