Make the same note for question mark as dropbox-oauth.

Box is more lenient for redirect URIs, but the same code will generate
the same URI, including the trailing question mark.