Allow custom token type

This enables custom token type, e.g. `Authorization: Basic 12345678`, while 'Bearer' remains as default.