FIX: Ensure query string in X-Backurl is encoded (fixes #3563)

Oops, good spot. Should’ve been using `encodeURI()` instead of `encodeURIComponent()`!