Detect either oauth2 or bearer as oauth2 token