Does this handle having a username + password in the url? It doesn't look like it would. Any way we can do this without a regex? They make me scared.