crudely parse authname from incoming root request