URL escape query string