Client side auth - attempts to use bearer strategy for api auth