Allow for passwords containing a ':' character.

Currently, authentication will fail if a password contains a ':' character. According to my reading of the RFC, the username must not contain a colon, but the password may. The fix is very straightforward (an extra argument to `split`). This pull request contains the fix and an additional test for this case.