careernow wrote
After authorization I have REMOTE_USER value: []
The URL rewriting rules were evaluated before the authorization module enters in action. This explains why the value was empty. Try enabling full URL rewriting logging to check the actual values of all the variables and headers and to know which ones are containing the user name value.
If the problem persists, please contact our technical support by email.