changed variable to use REMOTE_USER instead of Remote-User value to avoid confusion with header decoding of basic auth