removed HTTP_ prefix from documented request headers

Headers like HTTP_AUTHORIZATION a clients are sending as just AUTHORIZATION, w/o HTTP_ prefix, so generated documentation should respect that