FIX: Ensure query string in X-Backurl is encoded (fixes #3563)

Wouldn't this encode `&` and `=` symbols in the querystring as well?