Make the bearer token default to NULL

If we don't specify one then it should be disabled.

This didn't require a migration.