Returns the decoded password, or an empty string if none is present.
password()
http://host/
""
http://username@host/
http://username:password@host/
"password"
http://a%20b:c%20d@host/
"c d"