incoming request Authorization header is prepended with "OAuth" string if grabbed from apache headers
updated dependencies
service provider: https detection fix in getIncomingRequest
oauth validator expects guzzle request instead of string