Add ability to provide cookie or HTTP header for authentication

[mthuurne]

This was the most common question at T-DOSE: how can APE authenticate to my web app? Most developers have a way to bypass login, for example by passing a session cookie or HTTP authorization header, but no easy way to skip authentication altogether.