Safer generation of URLs w/ query-string