Allow empty password

RFC suggests password could be *TEXT, so have updated regex to allow
zero or more characters after the colon.
Add test case for empty password
Merge branch 'empty-password' of git://github.com/dynmeth/node-basic-auth
support empty usernames as well
1.0.0