get bearer-token-support branches of hoodie-server and hoodie.js