Ensure the token is always URL friendly

Email addresses with a + in them were generating a token with an unescaped forward slash, which messed up the subscription links and routes for Rails apps.