passwords can have colons in them; only first colon splits auth
Add gently for mocking
Only exit if process.env.TEST_ENV if falsey
Return errors in callback
Pass database to onMatch, test accordingly
Refactor to fix ohw_birth_report transition tests