docs: public static void verifyToken(HttpString header) {
          int length = header.length();
          for(int i = 0; i < length; ++i) {
              byte c = header.byteAt(i);
              if(!ALLOWED_TOKEN_CHARACTERS[c]) {
                  throw UndertowMessages.MESSAGES.invalidToken(c);
              }
          }
      }