auth: add support for multiple basic auth tokens