added mustache handling of bearer tokens