Malformed Authorization header returns 500

String authToken = extractToken(authHeader);
if(authToken.equals(okapiTokenHeader)) {

...
public String extractToken(String authorizationHeader) {
  Pattern pattern = null;
  Matcher matcher = null;
  String authToken = null;
  if(authorizationHeader == null) { return null; }
  pattern = Pattern.compile("Bearer\\s+(.+)"); // Grab anything after 'Bearer' and whitespace
  matcher = pattern.matcher(authorizationHeader);
  if(matcher.find() && matcher.groupCount() > 0) {
    return matcher.group(1);
  }
  return null;
}