added spec to prove that syntax error (invalid character) message takes precedence over authorisation failed

Also tests for invalid characters in org name
(NB: one of the utf8 characters was converted to ? in the acknowledgement)

closes #216