Fix 500 with blank token when attempting to update service providers

app/controllers/service_provider_controller.rb

@@ -25,6 +25,7 @@ def authorize
   end
 
   def authorization_token_valid?
+    return false if authorization_token.blank?
     ActiveSupport::SecurityUtils.secure_compare(
       authorization_token,
       IdentityConfig.store.dashboard_api_token,

spec/controllers/service_provider_controller_spec.rb

@@ -133,6 +133,16 @@
       end
     end
 
+    context 'missing token in header' do
+      let(:token) { nil }
+
+      it 'returns a 401' do
+        post :update
+
+        expect(response.status).to eq 401
+      end
+    end
+
     context 'feature off' do
       let(:use_feature) { false }
       before { post :update }