ExternalAuthentication: add a substitution variable for accessing any header value of the request

This commit also changes the remote URI syntax. Substitution variables are now
enclosed by brace brackets instead of being started by '$' character.
10 jobs for feature/external_auth_header_extraction
in 33 minutes and 20 seconds and was queued for 3 seconds