RequestHeaderIdentityProvider proxy updates
RequestHeaderIdentityProvider proxy updates

1) Redirect all non-auth requests to the Master
2) Require the X-Csrf-Token header be set for challenge auth
3) Better comments
4) Example static login and logout pages

xiaoping378/openshift-docs,xiaoping378/openshift-docs,xiaoping378/openshift-docs