only grabs bearer tokens