Fixed a bug in parsing Authorization header at protected resource endpoints.