Support looking at multiple name/prefix per token extractor

[chalasr]

Can be useful e.g. when using apache and FastCGI which can report the HTTP_AUTHORIZATION header as REDIRECT_HTTP_AUTHORIZATION (to be confirmed but still, the feature seems interesting to me).