I don't really mind either way, but I just thought 'bearer' was more in line with the OAuth2 [spec](http://tools.ietf.org/html/rfc6750#section-2.1). Also, we return token type of 'bearer' as part of the web application [flow](http://developer.github.com/v3/oauth/#web-application-flow).