switch to using cowboys new authorization header parser