The token authentication option inserts "Bearer" before the token the user configures. While this is typical, not all APIs authenticate with an Authorization header with a value of "Bearer xxxxxxxxxxxxxxxxx". The GLR configuration should not naively assume parameters like this. Simply let the user configure one or more arbitrary headers and values.