fix(server): Allow authorization bearer token header for API access

[nellh]

Originally reported by @jbwexler - this fix is also needed for deferred auth used with new upload features.

[codecov]

Codecov Report

Attention: 2 lines in your changes are missing coverage. Please review.

Comparison is base (601f3bb) 64.86% compared to head (c218202) 64.89%.
Report is 2 commits behind head on master.

Files	Patch %	Lines
...es/openneuro-server/src/libs/authentication/jwt.ts	80.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2944      +/-   ##
==========================================
+ Coverage   64.86%   64.89%   +0.02%     
==========================================
  Files         378      378              
  Lines       24221    24230       +9     
  Branches      864      868       +4     
==========================================
+ Hits        15710    15723      +13     
+ Misses       8511     8507       -4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.