Add this entry to avoid that Apache truncates Authorization header
<IfModule mod_setenvif.c> SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0 </IfModule>