Token authentication: header setting

Hello,

My hosting company swallows the "HTTP_AUTHENTICATION" header.

So I decided to make it a setting, so I could work around the problem.

I did not touch the tests, cause I'm not sure how to do it.

Maybe there is a better solution for my problem, and I would be glad to have your feedback on it.

Cheers