Add Authorization header to WordPress .htaccess rules

[joehoyle]

Usually, Apache doesn't pass the Authorization header by default to fgci. We should look into if we can add it to the WordPress rules for .htaccess, or somethign like that. This problem has existed on a lot of sites using apache that I've tested.

[georgestephanis]

Incidentally, something like WordPress/application-passwords@16af809 can test for whether the site's server is killing the authentication header, or whether it's behaving properly -- if it's worth making a general purpose tester or something.

Related discsussions:
WP-API/WP-API#2512
WordPress/application-passwords#46
WP-API/Basic-Auth#1
WP-API/Basic-Auth#35
WP-API/WP-API#8