Complain at invalid usernames

HTTP basic auth doesn't allow for usernames to contain a colon, as that breaks the delineation between username and password. Unfortunately, `CFHTTP…` doesn't enforce that, so we have to do it ourselves. I've filed a radar requesting that `CFHTTP…` do something too.