Please please please make this part of the public API 
Getting the request headers is such an essential thing, that I’m actually really surprised that this is not part of the public API yet. It basically prevents a streamlit app to be deployed behind an authentication proxy (such as oauth2-proxy).