CGI encode params so that ampersands don't blow up SR API