Quote all params in auth_url except redirect_url