Safer server handling of auth header.