Support no header prefix

[calsev]

Support AWS API gateway header convention for a drop-in replacement.

• Do not check for falsey prefix value at initialization to allow empty prefix by way of explicitly setting the prefix to a falsely value.
• The logic was already there to handle an empty prefix, this just removes the check at initialization.

Also some cleanup of the existing lock file:

• Used an EOL version of Python
• Tests did not pass due to Flask version too old to support the Jinja2 version: https://stackoverflow.com/questions/71718167/importerror-cannot-import-name-escape-from-jinja2

Also added documentation for how to run things by way of a Makefile.

[revmischa]

any reason it was closed?

[calsev]

I actually thought I got it closed before anyone noticed it was up :smile_cat: Basically:

• API Gateway + Cognito handles Authorization header with or without prefix
• It turns out I was mistaken and my frontend team is using Bearer prefix, so I don't need to remove the prefix.

The code is functional if you want me to re-open.