Make sure the controller password used in Torbutton is conforming to the spec
var auth_cmd = "AUTHENTICATE "+m_tb_control_pass+"\r\n";is basically just taking m_tb_control_pass and passing it along to tor. We should do some checks that it is actually conforming to the spec (it must be comprised of HEXIDIGITs or be a QuotedString).