Made authorization header name configurable so we still can add basic auth site-wide.