Added the option to customize the access-denied response.
Customize the extraction of the token from the request.
Documentation for the new features.