handle authorization header without auth scheme
Merge pull request #622 from nov/auth_scheme_can_be_nil

handle authorization header without auth scheme