[keycloak-user] can we use authorization with bearer-only ?