show how to use bearer token auth, until we get #8 done

This will help people use the bearer token auth, which we prefer.
Issue #8 should be tackled as well.