add test for special characters during authentication

references #407