update the ChangeLog to reflect the latest commits
fix debug printout
add configurable REMOTE_USER setting for OAuth 2.0

set the REMOTE_USER for OAuth 2.0 protected paths by populating it from
a configurable claim that defaults to "Username"
set HTTP headers for OAuth 2.0 paths

set the claims returned from the token validation call as HTTP headers
for applications on OAuth 2.0 protected paths
write ChangeLog for added OAuth 2.0 REMOTE_USER/HTTP header support