Fix parsing of Authorization header values.

Strip the Oauth scheme before parsing parameters. Strip whitespace consistently from parameters. Add comments.