API Authorization with REMOTE USER
Api auth now uses REMOTE_USER in addition to oauth and http basic