fix: bearer token support