@jws I'm sending it as form URL encoded body data. Even if something goes wrong, the API ought to still spit out a JSON response, because I am setting Accept to request that.
I wonder if the API's body decoding isn't undoing the escaping of + as %2B? I wanna say @larand ran into a similar problem logging in.
// @snrkl @matigo