Add urlencode() in return and cancel_return items in paypal params

This closes the #5670