URI-encode each param instead of the whole shebang so we can push HTML entities through