added bearer token auth