SAMLRequest needs to be URL-encoded