add ability to sudo an other user using X-Api-Sudo header (not using Symfony Security switch_user feature, because stick to using session, which is not stateless)