add bearer token auth