Work with headers

Hi Aaron,
A change so that it first checks for headers that match the auth_token var and if nothing found, then checks for cookies of the same name. Uses the search and hash search as on http://wiki.nginx.org/HeadersManagement. Would welcome any feedback.
Rgds,
AlexC