use regex to parse token value from auth header