Prevent exception with invalid auth string

Previously if you had an Authorization header, but it was invalid it was possible for the filter to ArrayIndexOutOfBounds. Now it should instead state that credentials are missing.