Apply encodeURIComponent to all user input

[cuttle-fish-my]

For safety concerns, all the user input (e.g search queries, program id, user id, applicant id, record id etc.) should be applied encodeURIComponent.