test authorization and bearer token request