`res.sendAuthorized` writes the message to the logger, so this can be simplified to:

    res.sendUnauthorized('Missing authorization header');

The message will also be returned to clients in the `error_description` field of the response object.