Add support for authentication using the REMOTE_USER header

This adds support for authentication using the REMOTE_USER header, to support authn providers using a single-sign-on solution that sets that header, or something like `.htaccess`.