Handle stupid clients that post “authentication” as an array.