fixing hardcoded HTTP header name in fromRequest

Hi,
the "X-Auth-Token" is hardcoded now and not configurable via Play configuration. You probably get the idea:-)

Cheers,
Jacek
Merge pull request #503 from jglodek/master

fixing hardcoded HTTP header name in fromRequest