Strict encode authorization header value

As per @tylermercier pointed out - it worth to use strict version of encoding.

/cc @tarcieri @sferik