clarify what the bearer token should be