enable a .env config value to determine the exact header to extract the username from the reverse proxy

[garland3]

make the app more flexible.
different systems have different reverse proxy setups and inject different header keys.
make it so that the header to extract can be configured by a .env var with the current setup as the default.