DS-1503 use getAttribute first before attempting to check getHeader for
the user value. ShibUseHeaders is not enabled by default in Apache.
Merge pull request #196 from LongsightGroup/DS-1503

DS-1503 ShibAuthentication depends on use of non-recommended Apache UseHeaders setting