Allow colons in passwords for req.auth

Passwords in basic auth can contain colons (as per RFC2617), while
usernames cannot, so assume everything after the colon is a password.
This makes req.auth return the correct value if the user uses a colon
in his password.
Merge pull request #1462 from gmethvin/colon_auth

Allow colons in passwords for req.auth