pub fn extract_bearer_token(auth_header: &str) -> Option<String>
Extract bearer token from Authorization header