make oauth header parsing more resilient to padding. fixes #136