I think we should use a proper query string parser here. Or what would probably be better is to change the Pocket API to use JSON. I read in the API docs, that it can be both be spoken to in either `urlencoded` or `JSON` format:

```
The Pocket Authentication API supports two formats:
application/x-www-form-urlencoded (DEFAULT)
application/json
```