A way to make this line a littler shorter is to to use `Regex#exec` instead of `String#match`:

```js
var auth = /^Bearer (.+)$/.exec(req.headers['authorization']);
```

`Regex#exec` will return `null` on any bogus input, so you don't have to do that defensive OR'ing.