Test read access token from Authorization header