only handle Bearer scheme auths