minor #20107 [Security] fix: propose a better header naming for custom authenticator (94noni)

This PR was merged into the 5.4 branch.

Discussion
----------

[Security] fix: propose a better header naming for custom authenticator

Ref https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers

Commits
-------

27a4f50 Update custom_authenticator.rst

Author: javiereguiluz

security/custom_authenticator.rst

@@ -37,12 +37,12 @@ method that fits most use-cases::
          */
         public function supports(Request $request): ?bool
         {
-            return $request->headers->has('X-AUTH-TOKEN');
+            return $request->headers->has('auth-token');
         }
 
         public function authenticate(Request $request): Passport
         {
-            $apiToken = $request->headers->get('X-AUTH-TOKEN');
+            $apiToken = $request->headers->get('auth-token');
             if (null === $apiToken) {
                 // The token header was empty, authentication fails with HTTP Status
                 // Code 401 "Unauthorized"