Allow more then one additional authentication algorithms beside digest

Currently we can activate only one additional authentication method beside digest. But in some cases we need to handle more than one. For example using LTI and basic auth (for external API) is currently not possible. This should be changed.