Bugfix: better auth header parsing.

Fixes #104

This is a regression brought on by recent refactorings. The new
functionality is more robust in that l2met no longer cares whether
you have a user:password format of decoded authorization. It will
take everything up to and excluding the `:`.