When PL reads parameters from the Request object the default encoding is used. This leads to mojibake in POSTed values for any special characters in UTF-8 applications. The FormAuthenticator has the parameter characterEncoding that is set in the Request object right before reading parameters. Unfortunately this is not used in PL.