Is code a bearer token type thing?