HTTP Authentication header could include unquoted values

Since f71cca9e1007bd928ec6fe27e3b3147ec59afac7 (which was included in 4.0), AC HttpAuthentication stopped accepting unquoted values in the header string.
This patch fixes the incompatibility.