Auth fetch verification (cavage) works now

- Verifying inbound requests signed with Cavage are now checked as
  expected
- Fixed a bug where the signature header is not generated correctly
- Extended config to include settings for what requests to verify
- Fixed new server in main not using internal port from config

web/shared/client.go

@@ -3,11 +3,8 @@ package webshared
 import (
 	"io"
 	"net/http"
-	"strings"
 	"time"
 
-	"git.mstar.dev/mstar/goutils/maputils"
-
 	"git.mstar.dev/mstar/linstrom/config"
 )
 
@@ -28,18 +25,7 @@ func SignRequest(r *http.Request, keyId string, privateKeyBytes, postBody []byte
 		headers.Set("Date", time.Now().UTC().Format(http.TimeFormat))
 	}
 	applyBodyHash(headers, postBody)
-	mappedHeaders := maputils.MapNewKeys(headers, func(k string, v []string) (string, string) {
-		if len(v) > 0 {
-			return strings.ToLower(k), v[0]
-		} else {
-			return strings.ToLower(k), ""
-		}
-	})
 	// Filter for only the date, host, digest and request-target headers
-	mappedHeaders = maputils.FilterMap(mappedHeaders, func(k, v string) bool {
-		k = strings.ToLower(k)
-		return k == "date" || k == "host" || k == "digest" || k == "(request-target)"
-	})
 	var signedString string
 	var usedHeaders []string
 	if config.GlobalConfig.Experimental.UseEd25519Keys {