Server does not check correctly if 'Authorization' Header is really in Base64

[m1dok]

If sent an authorization header and base64 string is malformed or not base64, the server crash and returns 500 internal server error.

Probably in line 585 of interfaces, you assume the string is base64 and decode it without checking it or handling exceptions.

           auth = (cast(char[])Base64.decode(auth[6..$])).to!string;