bugfix to RemoteUserLoginProvider.getPreAuthorizedUsername()

Was trying to get the value of X-Remote-User from a parameter,
not a header.