DAMN AMERICANS! :P Passwords can contain non-ascii!

ASCII is a subset of utf8. If we find high-bit chars in ANY of these
strings, decoding them as unicode can at least succeed, instead of
returning NULL and crashing. Maybe not all of them should be UTF-8,
but username and password definitely should.