[fixed] encoded ampersands in query params

fixes #343 

@mjackson @spicyj 

I'm worried I'm not thinking about this clearly, but I don't think we need to decode the query params before sending them on to the `qs` module. Can you think of anything I'm missing?