[minor] encode all usernames passed as parameters to ensure paths are hit