This function decodes something different from the usual c-escaped format. It is only used in controller authorization.