Add discid_get_toc_string() to get 'toc=...' string alone.

Use it in create_submission_url() and create_webservice_url(), reducing
code redundancy.
Calculations of buffers length was slightly modified to be safe.

Fix http://tickets.musicbrainz.org/browse/LIB-41