Bearer should be set by default in the authorization field, as it's hard to understand that we have to set it ourselves. It would be easier to understand if it were set by default or if a form was just used for the token.