HttpClient does not deal well with multi-valued WWW-Authenticate challenge headers

See https://stackoverflow.com/a/54208946

IIUC the issue is that the server sends a multi-valued WWW-Authenticate, one of the values being BASIC. But the HttpClient only looks at the first one - which apparently is not BASIC, and stops there.