how to require bearer authorization header to specific requests code example Example: bearer token header Authorization: Bearer <token>