url encode the auth code