htextauth: Check credentials against control characters that might mess stuff up.