added function to get the access_token from request
renamed server parameter from AUTHORIZATION to HTTP_AUTHORIZATION