add support for alternate auth header formats. fixes #7.
readme [wip]