Patch to handle passwords with colon characters properly.

Passwords with colons are currently not passed through the system properly because it is only expecting one colon in the entire username:password string.

Passwords should be able to have colons:

    RFC 2617                  HTTP Authentication                  June 1999

                       except not limited to 76 char/line>
      user-pass   = userid ":" password
      userid      = *<TEXT excluding ":">
      password    = *TEXT

Included are failing tests and patches to make it work as far as I can tell.