Line 68 in AddUser should take the user's locale into account when calling URLEncoder.encode() and String.toLowerCase().

eg:

// This should be the system encoding set
return getRedirect("ViewUser.jspa?name=" + URLEncoder.encode(username.toLowerCase(getLocale()), "UTF-8" ));

We should also check for other occurences of URLEncoder.encode(), which is deprecated.