Problem

At present the API expects the JWT token to be passed in as a Authorization: Bearer header.

It would be nice if this was configurable to look for a specified header instead, or potentially read a cookie value

Solution

Add a JWT_HEADER configuration field to specify custom header to look for the JWT Token in