Verify that the authorization header has 2 parts