Handle multiple WWW-Auth Header responses, prefer SS Auth Responses which contain "realm"