Fixed a bug in TokenAuth. Namely, when the token were passed as "Authorization: <token>" or "Authorization: Token <token>" headers, the werkzeug parse_authorization did not recognize it as a valid authorization header, therefore the request.authorization field was empty. The workaround now considers, in addition to the werkzeug parsed authorization, also a direct manipulation of the "Authorization" header.
Fixed a bug in TokenAuth. Namely, when the token were passed as "Authorization: <token>" or "Authorization: Token <token>" headers, the werkzeug parse_authorization did not recognize it as a valid authorization header, therefore the request.authorization field was empty.
The workaround now considers, in addition to the werkzeug parsed authorization, also a direct manipulation of the "Authorization" header.

bcrochet/eve