stream: include token type in Authorization header
setup: bump to 0.3.12