Safely add GET params to admin URLs

Use WP add_query_arg() in favor of string concatenation.
Merge pull request #2 from mcguffin/master

Using Wordpress's `add_query_arg` in favour of `http_build_query`