Similar to https://github.com/superfly/wormhole/issues/9. HTTP2 does not currently check for valid tokens