Clean up regular expressions for headers and auth and fix | being allowed for headers, allow any characters for auth password