Don't use literals for HTTP header names.
Separate out deployment profiles.

Resolves #15.

The incommon profile is removed entirely; dev and prod are refactored
to make selectively overriding them in the deployment configuration
possible.

Deployment configuration file can be overridden using a "config.xml"
property.