* % sign makes problem if it's used as password token to create a password.
Never encountered before in testing, first thing with a live user.