Fix authentication

Authentication was actually working correctly as long as neither password nor email contains characters to be encoded, i.e. &, +, etc.