Passing the Authorization header via htaccess