feat: add lowercase header param check, implement secondary authoriza…

[szvarhegyi]

When i use double reverse proxy, the authorization header param is removed, so i implemented the optional secondary authorization header param which can be set from UI.

Another feature is, the header check always check lowercase names.