diff --git a/src/webapp.py b/src/webapp.py
index ebc8a98..7892f32 100644
--- a/src/webapp.py
+++ b/src/webapp.py
@@ -195,7 +195,7 @@ class ScriptFormWebApp(RequestHandler):
             if auth_header is not None:
                 # Validate the username and password
                 auth_unpw = auth_header.split(' ', 1)[1]
-                username, password = base64.decodestring(auth_unpw).split(":")
+                username, password = base64.decodestring(auth_unpw).split(":", 1)
                 pw_hash = hashlib.sha256(password).hexdigest()
 
                 if username in form_config.users and \