fixed support for HTTP_REMOTE_USER hack in dev environment