REST API with MongoDB authentification and bearer header