title: Authorization header missing in django rest_framework, is apache to blame?
body: <p>I've managed to extend <code>TokenAuthentication</code> and I have a working model when using the request session to store my tokens, however when I attempt to pass <code>Authorization</code> as a header parameter <a href="http://django-rest-framework.org/api-guide/authentication.html#custom-authentication">as described here</a>, I noticed that my Responses come back without the META variable HTTP_AUTHORIZATION. I also noticed that if I pass "Authorization2" as a header parameter that it is visible in the request:</p>
  
  <pre><code>{
      '_content_type': '', 
      'accepted_media_type': 'application/json', 
      '_request': &lt;WSGIRequest
          path:/api/test_auth/,
          GET:&lt;QueryDict: {}&gt;,
          POST:&lt;QueryDict: {}&gt;,
          COOKIES:{
              'MOD_AUTH_CAS_S': 'ba90237b5b6a15017f8ca1d5ef0b95c1',
              'csrftoken': 'VswgfoOGHQmbWpCXksGUycj94XlwBwMh',
              'sessionid': 'de1f3a8eee48730dd34f6b4d41caa210'
          },
          META:{
             'DOCUMENT_ROOT': '/etc/apache2/htdocs',
             'GATEWAY_INTERFACE': 'CGI/1.1',
             'HTTPS': '1',
             'HTTP_ACCEPT': '*/*',
             'HTTP_ACCEPT_CHARSET': 'ISO-8859-1,utf-8;q=0.7,*;q=0.3',
             'HTTP_ACCEPT_ENCODING': 'gzip,deflate,sdch',
             'HTTP_ACCEPT_LANGUAGE': 'en-US,en;q=0.8',
             'HTTP_AUTHORIZATION2': 'Token 9944b09199c62bcf9418ad846dd0e4bbdfc6ee4c',
             ...
  </code></pre>
  
  <p>My first guess is that the authorization header is being removed by apache, and I have read a few S/O questions that state that apache will throw out the value if it does not match basic authorization and authenticate, but I have no idea how to allow the Authorization header to 'pass through' to Django and the WSGIRequest. Does anyone know how to solve this problem?</p>
  
  <p>I also use mod_auth_cas and mod_proxy, if that changes anything..</p>