Fix issue #178

This change allows a lock timout header to have multiple values, per RFC 4918 section 10.7.
All but the first value are ignored.