Playing with JWT (Jason Web Token+Bearer)