(SERVER-18) global config to dissallow cn header

The puppet.conf settings, ssl-client-header and ssl-client-verify-header
are potentially dangerous so an explicit Puppet Server config option was
added. This option is :allow-header-cert-info and it's found in the
global config section.