Better OAuth2 token consistency

We should be using an Authorization header value of "Authorization: bearer OAUTH-TOKEN" consistently throughout the docs.