Rename X-SECURE-TOKEN to HTTP_X_SECURE_TOKEN

* Required to work with default way ActiveResource sets headers