Try to get HTTP headers directly from Apache for a token with underscore

I hate computers!
I think that we should just sanitize the token values on generation to avoid the header from being dropped. This would save us from this apache specific hack.