add req.params[this._hashParam] != undefined in authenticate condition.

Was not entering the Headers condition.