Add test for malformed authorization scheme

Existing code verifies if the scheme parsed from the Authorization header is (case-insensitively) equal to `Basic`, as per RFC 2617. I've added a test to assert this.