exmaple of auth using bearer token with http header added in the controller