An express middleware for header based authroization