Fix Medusa auth handler when password has a colon.  Closes #309