minor fix where : was not allowed in basic auth passwords breaking our c...

easy merge where the character : is now allowed in basic auth passwords with this fix (so we adhere to the basic auth specification).