[FEATURE] Give access-token a new chance

Add support to access-token as a header name, instead of
access_token via code. Even if the key name can be changed in the
annotation, this is common enough to deserve some babysitting.

modules/restful_token_auth/src/Plugin/authentication/TokenAuthentication.php

@@ -89,6 +89,14 @@ protected function extractToken(RequestInterface $request) {
 
     // Access token may be on the request, or in the headers.
     $input = $request->getParsedInput();
+
+    // If we don't have a $key_name on either the URL or the in the headers,
+    // then check again using a hyphen instead of an underscore. This is due to
+    // new versions of Apache not accepting headers with underscores.
+    if (empty($input[$key_name]) && $request->getHeaders()->get($key_name)->getValueString()) {
+      $key_name = str_replace('_', '-', $key_name);
+    }
+
     return empty($input[$key_name]) ? $request->getHeaders()->get($key_name)->getValueString() : $input[$key_name];
   }