added note about login escaping and issues with slash character