SECURITY split single-String multiple header values