Use urlencode to construct query parameters

Including the `?` and `&` in the templates is awkward. Instead, use a
dictionary with just the parameter names and use `urlencode` to
construct the query string. This also has the advantage that any values
will be properly HTML encoded.

https://phabricator.endlessm.com/T29306