Further info:
file: /usr/lib/lua/luci/dispatcher.lua, in function setup
local login = util.ubus("session", "login", {
username = user,
password = pass,
timeout = tonumber(luci.config.sauth.sessiontime)
})
user and pass are OK, login is nil
the password contains "[" issue?