unescape uri in HandleAuthorizeRequest