Support X_Authentication header

Slim only extracts headers from the given mock environment if
it starts with X_ or HTTP_ or a few special others.