bearer token header case sensitive