read authentication token from php-cgi header