PlainAuthenticationHandlerFactory doesn't detect invalid Base64 string

[teemulang]

PlainAuthenticationHandlerFactory expects Base64.getDecoder().decode(secret) to return null on failure, but actually an IllegalArgumentException is thrown. LoginAuthenticationHandlerFactory handles this correctly.

[davidmoten]

Thanks! I'll have a look