code: private String getAuthorizationToken(final HttpHeaders headers) {
          if (headers.getCookies() != null) {
              for (Map.Entry<String, Cookie> entry : headers.getCookies().entrySet()) {
                  if (AuthorizationTokenCookie.COOKIE_NAME.equals(entry.getValue().getName())) {
                      return entry.getValue().getValue();
                  }
              }
          }
          final List<String> header = headers.getRequestHeader("Authorization");
          if (header != null) {
              final String bearer = header.get(0);
              if (bearer != null) {
                  return bearer.substring("Bearer ".length());
              }
          }
          return null;
      }
docs: Returns the token (as a String), if it exists, otherwise returns null.
  
  @param headers the HttpHeader to inspect to find the Authorization-Token
  cookie or Authorization Bearer header
  @return the token if found, otherwise null
  @since 1.0.0