[minor] fix header name for forwareded for in auth