proof-of-concept support for authentication using JSON Web Tokens & HTTP bearer authentication