FIX: Ensure query string in X-Backurl is encoded (fixes #3563)