don't escape tildes as per http://oauth.net/core/1.0/ and http://tools.ietf.org/html/rfc3986#section-2.3