Ignoring auth schemes other than bearer.

Missed my own comment :) Should this be "; otherwise, ..." ?