Cookie.encode: Added & to the list of reserved characters

[Closes #521]