HTTP Bearer support compatible with express-authentication.