allow auth parameter and use it to set request header

Allow to use an Auth parameter in the URL instead of the header for the request. Indeed some user are not allow to set the httphearder on their system

http://localhost:4567/mrs/ProgramHistory/index.csv?auth=bWFyY3VzQHRleHR0b2NoYW5nZS5jb206bWFyY3Vz