Fix the typo and add Bearer token support

/to @ritch 
/to @bajtos 

See https://github.com/strongloop/loopback/issues/333
Where is this test enabling "secure cookie"?