Get Accesstoken from authorization header