hack to allow authorization with '@' in username