Added HTTP headers to the GetClaims signature to allow decisions based on header values