Fix a bug where only the first configured UAM was loaded

Caused by strtok() not being async signal safe, use strtok_r() instead.
Fixes bug #537.
Update NEWS