title: Apache strips down "Authorization" header
body: <p>I'm having a little issue with my Apache 2.2.15 Server.
  I'm running a Django app on top of it with mod_wsgi. I activated <code>WSGIPassAuthorization On</code>, which made the Basic auth working well. But I recently implemented OAuth2.0 to secure my API (Implicit Grant), and I think Apache won't let it pass since it is of the form "Authorization: Bearer token". The "Bearer" is the issue I guess, though I don't know how to avoid that.</p>
  
  <p>I tried :</p>
  
  <pre><code>RewriteEngine On
  RewriteCond %{HTTP:Authorization} ^(.*)
  RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
  </code></pre>
  
  <p>In the httpd.conf, .htaccess (after setting <code>AllowOverride All</code>), and in my vhost. Nothing to do, doesn't work.
  I've crawled the Internet all day long, and didn't find anything but those two solutions.</p>
  
  <p>Thank you in advance !</p>
  
  <p><strong>EDIT:</strong></p>
  
  <pre><code>OS : RedHatEL6.4
  Apache : 2.2.15
  Django: 1.6.6 w/ django-oauth-toolkit
  Python: 2.7.8
  </code></pre>