set WSGIPassAuthorization to On