Move assertion header name to directory-config
Only check for assertions on POST requests

Fixes mozilla/mod_authn_persona#45