Only include ":" + pass in Basic Auth if it's defined (fixes #602)