1) Non-ASCII username/password errors are logged to stderr;
2) a TODO is added.