DOC: config: Move req.hdrs and req.hdrs_bin in L7 samples fetches section

req.hdrs and req.hdrs_bin are L7 sample fetches, not L6. They were in the wrong
section.

This patch may be backported as far as 1.8.

(cherry picked from commit 687a68e2d04900e84317d066de80891a7f848747)
Signed-off-by: William Lallemand <wlallemand@haproxy.org>
diff --git a/doc/configuration.txt b/doc/configuration.txt
index 93c9937..da3a091 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -17828,25 +17828,6 @@
   (e.g. "stick on", "stick match"), and for "res.payload_lv" when used in the
   context of a response such as in "stick store response".
 
-req.hdrs : string
-  Returns the current request headers as string including the last empty line
-  separating headers from the request body. The last empty line can be used to
-  detect a truncated header block. This sample fetch is useful for some SPOE
-  headers analyzers and for advanced logging.
-
-req.hdrs_bin : binary
-  Returns the current request headers contained in preparsed binary form. This
-  is useful for offloading some processing with SPOE. Each string is described
-  by a length followed by the number of bytes indicated in the length. The
-  length is represented using the variable integer encoding detailed in the
-  SPOE documentation. The end of the list is marked by a couple of empty header
-  names and values (length of 0 for both).
-
-  *(<str:header-name><str:header-value>)<empty string><empty string>
-
-  int:  refer to the SPOE documentation for the encoding
-  str:  <int:length><bytes>
-
 req.len : integer
 req_len : integer (deprecated)
   Returns an integer value corresponding to the number of bytes present in the
@@ -18322,7 +18303,24 @@
   the first one. Negative values indicate positions relative to the last one,
   with -1 being the last one. A typical use is with the X-Forwarded-For header.
 
+req.hdrs : string
+  Returns the current request headers as string including the last empty line
+  separating headers from the request body. The last empty line can be used to
+  detect a truncated header block. This sample fetch is useful for some SPOE
+  headers analyzers and for advanced logging.
+
+req.hdrs_bin : binary
+  Returns the current request headers contained in preparsed binary form. This
+  is useful for offloading some processing with SPOE. Each string is described
+  by a length followed by the number of bytes indicated in the length. The
+  length is represented using the variable integer encoding detailed in the
+  SPOE documentation. The end of the list is marked by a couple of empty header
+  names and values (length of 0 for both).
+
+  *(<str:header-name><str:header-value>)<empty string><empty string>
 
+  int:  refer to the SPOE documentation for the encoding
+  str:  <int:length><bytes>
 
 http_auth(<userlist>) : boolean
   Returns a boolean indicating whether the authentication data received from