Hi,
The username and password is limited at login by the ability to base64 encode them with the client side js. So an account can be created with a username/password with a character that then can't be used in the auth routine?
As an example, if I login in as an admin, create a login: e.g.
user: Admin2@domain.com
password: 12345¬
This account will be unable to login.
Regards,
Jak