removed HTTP_ prefix from documented request headers

HTTP_ prefixed headers like HTTP_AUTHORIZATION are sending by clients just as AUTHORIZATION, so the documentation should respect it
http://en.wikipedia.org/wiki/List_of_HTTP_header_fields