Bearer token security for Hapi