unescape *all* colons, instead of just the first one in encoded user IDs