Accessing protected route before ever logging in crashes application

[smayya337]

This is just a basic validation issue -- need to add a check on whether the Authorization header even exists before trying to do anything with it.