reworking Authorization handling
www-authenticate handling
authorization parser allows spaces after commas
fixed pb-api dep