use unquote on authentication strings, to allow users to embed
@ and : in user names and passwords (from Phillip Eby)