Does `req.headers.authorization` work? I didn't find reference in the documentation for it, but found `req.get` instead (http://expressjs.com/3x/api.html#req.get)