Query param parser is over aggressive with `+`

[Eric Oestrich]

Sending an email address with a + in it escapes away to a space. Sometimes we want the + sign and it shouldn't be escaped. Look into how existing frameworks handle this.