XWiki authentication based on HTTP headers