I think param values here should be un-encoded.

@smn There's also a PR for allowing these params to be part of the URL: praekelt/vumi-jssandbox-toolkit#143. It can wait though, just thought its worth mentioning.