whole URI should be encoded just to be safe
no need for encodeURI here