Fixed passing parameters in url to the "user" API.

URL constructed by concatenation was encoded and not recognized by the server.