parse authorization into schema and token

Signed-off-by: abbr <wenfred@gmail.com>