added support for basic auth in the sync url. #17

also added $ character to URL_PATTERN to cover case where it's in your
password.