experimenting with X-JWT-Assertion and WSO2 API Manager
change header key to lowercase