added tokenType (bearer|client)