work in progress towards implementing a bearer authentication token scheme