sample application to test Remote User Header authentication