Ensure app origin is encoded (bug 1065006)

it's already partially encoded by Django. The input to this method is something like ``/api/v1/payments/app%3A//fxpay.allizom.org/in-app/``. You can't run that through quote_plus otherwise you'll get double encoding.