Function which extracts session id from Authorization header.
If the token could not be extracted, the extractor should throw an exception.
Defaults to extractor which expects Authorization header with value in the format: Bearer ${token}.
Options for {@link UserSessionManager}.
User session options.