Escape list values in util.queryParamsToString()

Fixes #117