Flatten a string in the authorization header.