added support for saml bearer token auth (useful until we switch to keycloak)