@etehtsea , sorry it's my fault..:pensive: rfc you provided seems more valid for our case. I used rfc link from oauth2 main page and just fluently search for differences but seems we should rely on [this document](http://tools.ietf.org/html/rfc6750) that describes "Bearer Token Usage".