OFREP providers don't encode flagKey

[toddbaert]

It seems to me that we aren't properly encoding the /{flagKey} path segment in OFREP requests here.

This means that flags with certain characters in them / for example, will cause errors, and potentially present security issues.

We should encode this segment.

cc @juanparadox