JavaScriptSeverity: InfoStatus: Fixed

README examples: handle a missing Authorization header

Docs-only PR: in v3, parse() expects a string, so the README examples now pass req.headers.authorization ?? '' to match the upgrade instructions. A request without an Authorization header then gets undefined back (and a 401 in the http server example). Merged.