Updated determineAccessToken in Resource server to not consider Basic Authorization header