Parse names of the form "admin:user" or "local:user" in auth header