Access WeakMap from window.

Prevents error about access to undefined object.
Use authorization "Bearer".

That's what OAuth2 does.