Decode user ID and password as URI components

The user ID and password must be encoded in order to [allow passwords that contain colons](https://github.com/jaredhanson/passport-http/issues/20).

Would it be appropriate to encode them as URI components, thus escaping the colon if there is one anywhere in the credentials?