Capitalization of the 2FA OTP request header