Changes auth header parsing to use quoted values and comma separation