TokenPathBinder: apply URI decoding to path tokens

Otherwise, the token paths are still in their encoded form, pushing this responsibility to the application.