Synapse appears to be dishing out signed requests now via the Authorization header. We still may need to verify the signature, however this is a fix in the interest of getting people's repos working.

We also should have been validating if the token started with Bearer anyways.

Fixes #57