fixing hardcoded HTTP header name in fromRequest

Hi,
the "X-Auth-Token" is hardcoded now and not configurable via Play configuration. You probably get the idea. 

Cheers,
Jacek