adding OAuth 2.0 bearer auth