Add Authorization header to WordPress .htaccess rules

[joehoyle]

Usually, Apache doesn't pass the Authorization header by default to fgci. We should look into if we can add it to the WordPress rules for .htaccess, or somethign like that. This problem has existed on a lot of sites using apache that I've tested.

[georgestephanis]

Incidentally, something like https://github.com/georgestephanis/application-passwords/commit/16af809dcaeb347baef8f3a116170eef1bca6633 can test for whether the site's server is killing the authentication header, or whether it's behaving properly -- if it's worth making a general purpose tester or something.

Related discsussions: https://github.com/WP-API/WP-API/issues/2512 https://github.com/georgestephanis/application-passwords/issues/46 https://github.com/WP-API/Basic-Auth/issues/1 https://github.com/WP-API/Basic-Auth/issues/35 https://github.com/WP-API/WP-API/issues/8