ACIK fix and custom request headers

This is going to be open source. So can we add a comment on what this does:
// Site Recovery requests that go to on-premise components (like the Provider installed in VMM) require an authentication token that is signed with the vault key to indicate that the request indeed originated from the end-user client. Generating that authentication token here and sending it via http headers.