I'm not a fan of session_header as, even it's the most common case, user identifier can not be in a session (like a Authorization header for Oauth).

Is this description ok:

Name of the header that contains the unique identifier for the user in the hash request.

?