I can't get my REST to authenticate because my ISP strips the Authorization header, and puts it into $_SERVER['REDIRECT_HTTP_AUTHORIZATION'] (apparently security concern)
The really spooky thing is (for me a php novice), if I put a header dump into a test.php, i can see the value of $_SERVER['REDIRECT_HTTP_AUTHORIZATION'], but if I put the dump into the very top of index.php and call with myshop.com/oauth/initiate it isn't there???????