@Test
public void test_unauthorized_if_type_is_not_bearer() throws Exception {

    when(context.header("authorization")).thenReturn("Basic session_id");
    Payload payload = apiKeyFilter.apply("url", context, nextFilter);
    assertThat(payload.code()).isEqualTo(401);
}