Do you have a best solution to forbid coma in the first step ? 
Because, when I send a request without realm, the http header is false because of a bad coma.