v2.2.0

• provide raw token on state by specifying opts.tokenKey
• use typeof instead of util.isFunction
• fix bug when Authorization header is two words but the first is not Bearer

See #72 for other changes not related to functionality