support ':' in the password