Add tests for bearer token authentication