Do not url encode the following characters in password ! * ) (
-- more closely follow encodeURIComponent(str) convention.