Changed determineAccessToken in Resource server to throw an exception if no Authorization header is set for put and delete requests. Also improved regex to remove 'Bearer' keyword