Flag parsing for headers allows `|`, Flag parsing for auth password is too strict

Hey there

This fixes some issues with header and auth flags:

- Header flag allows `|` in header name
- Auth flag parsing is too strict, password may contain special characters