Transmission of Authorization header should probably be on by default
Because of #1244 (closed), CGIPassAuth, which was enabled by default, was commented, this disabling OIDC and Kerberos by default. #1593 (closed) offered an alternative for old apache versions, but did not enable it back by default.
IfVersion allows us to enable one method or the other depending on the Apache version.