Allow multiple challenges in a single authenticate header as defined by rfc2616