changing from 'OAuth' to 'Bearer' for Authorization header