strip newlines from the authorization header