I'm away from my desk today so I can't have a proper look, but we have examples of bulk action lists working with return_urls that I had a peek at... They don't urlencode but they do HTML encode, so we get the amp entity in our hidden input values. This doesn't cause a problem though.
So now you are using "noquote" in your include, is your problem with URL encoding or HTML encoding?
