Allow configuration of $hide_auth_header no matter what $edit_identity is set to and clarify explanation - synchronize with r14279