Bearer token type was "bearer", however header expected "Bearer". This prevented callers from using the returned token type with the Authorization heder in subsequent calls