XSRF Redirect encoding fix - do not encode '-' characters

Small fix to prevent the encoding of '-' (dash) characters in URLs