We'd have an exception raised before reaching this line if RackMojAuth::Resources::SECURE_TOKEN was nil - so don't think we need to check token_header.present?