Support userid only fixes #9

I think a test for malformed credentials is important - in fact, earlier today, a CVE for a popular PHP framework regarding this issue was published (*CVE-2014-6061: Security issue when parsing the Authorization header*). I have added two new tests to make sure we're not vulnerable to this, even though no exploits have been demonstrated.