fixed cookie encode uri component for allowed characters