middlewares: introduce correct auth header checker

RIP SSH key-based header. You were a cool idea while you lasted. :(