Ignores casing on the scheme comparison

According to RFC 2617, the scheme is case insensitive: "It uses an extensible, case-insensitive token to identify the authentication scheme".