Add support for basic auth credentials in URLs.

The stock Apache UrlValidator doesn't support credentials in URLs. The
authority-pattern is taken from the Apache codebase and prefixed with an
optional regex for credentials to fix this.