Handle colons in passwords

Fixes an issue where attempts to authenticate passwords containing
one or more colons failed with an HTTP 500 "too many values to
unpack".