Add feature to extract token from multiple headers

[simongottschlag]

Make it possible to extract a token from multiple header.

Example would be both Authorization and Sec-WebSocket-Protocol.