Let's try updating the password to not include a # sign. It appears to be properly encoded, but that could be the issue. Maybe try just a combination of letters and numbers for now to eliminate that as the potential cause. Hash signs do need to be encoded because they are used for anchor links, so that shouldn't be an issue, but better to eliminate that since we are getting an authentication error.