Reject non-Bearer Authorization headers.