Function bearer_from_headers 

pub fn bearer_from_headers(headers: &HeaderMap) -> Option<String>

The raw token from Authorization: Bearer <token>, if well-formed. It is a credential: never log it or put it in an error.