uac.tokenRole util.HTTPVariableOrHeader