Harden WWW-Authenticate parsing

This patch ensures that authorizations are NTLM ones.