CSRF and authentication mild rework

app/controllers/authentication/AuthenticatedAction.scala

@@ -12,14 +12,9 @@ import scala.concurrent.{ExecutionContext, Future}
 class AuthenticatedRequest[A](val token: AuthToken, val user: User, request: Request[A]) extends WrappedRequest[A](request)
 
 class AuthenticatedAction @Inject()(authTokensDao: AuthTokensDAO)(implicit val executionContext: ExecutionContext) extends ActionRefiner[Request, AuthenticatedRequest] {
-  private final val tokenPrefix = "Token"
-
   override protected def refine[A](request: Request[A]): Future[Either[Result, AuthenticatedRequest[A]]] = {
     val authHeader = request.headers.get("Authorization")
-      .flatMap { header =>
-        if header.startsWith(tokenPrefix) then Some(header.substring(tokenPrefix.length).trim)
-        else None
-      }
+      .map(_.split(" ", 2)(1))
       .filter(_.nonEmpty)
 
     authHeader match {