http: relax syntax requirements for OAuth2 Bearer token parsing