Fix BWS handling in auth-param

ignore BWS around equal sign