note mod_authz_user dependency for example usage
remove config sample, the README should cover it all
make it work on apache-2.2 again
rename custom header, per RFC 6648