bearer token deserialized