Make sure SASL tokenizer strips strings

Fix DIGEST-MD5 auth (make sure we're not splitting on BASE64 `==')