http.c: use strbuf API in quote_ref_url