ENH: further tighten lighttpd basic auth regex