encodeURIComponent on email and password cause basic auth uses in the
URL (for now)