i.e. LOGIN: "username": its not clear whats allowed here. current implementation restricts this ascii & [] also length limit isn't specified in protocol. i guess thats where #31 comes in place...
