When users provide credentials to their website that actually do work for them, do they often fail when special characters are provided? I'm curious to see if there's a common pattern. The only other thing I can think of is copy-paste is including whitespace in the credentials.