forwardOriginalToken: true does not work

cc @diemtvu for JWT RequestAuthentication.