Urlencode the requesttoken

Followup of #13757

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

lib/private/legacy/user.php

@@ -270,7 +270,7 @@ class OC_User {
 		}
 
 		$logoutUrl = $urlGenerator->linkToRouteAbsolute('core.login.logout');
-		$logoutUrl .= '?requesttoken=' . \OCP\Util::callRegister();
+		$logoutUrl .= '?requesttoken=' . urlencode(\OCP\Util::callRegister());
 
 		return $logoutUrl;
 	}

tests/lib/NavigationManagerTest.php

@@ -270,7 +270,7 @@ class NavigationManagerTest extends TestCase {
 			'logout' => [
 				'id'      => 'logout',
 				'order'   => 99999,
-				'href'    => 'https://example.com/logout?requesttoken='. \OCP\Util::callRegister(),
+				'href'    => 'https://example.com/logout?requesttoken='. urlencode(\OCP\Util::callRegister()),
 				'icon'    => '/apps/core/img/actions/logout.svg',
 				'name'    => 'Log out',
 				'active'  => false,