working on bearer authentication