URL-encode the session ID