websrv_lib: accept ':' in passwords, in Basic HTTP auth.

LP bug: #1093277, as reported by Andreas Wolf

If the password ever contained ':' , the split() call would cause
an error unpacking the values.