Be less defensive in get_auth_from_url.
Don't need to unquote twice.