Strip improper chars from control pass auth