Session token as authorisation bearer - ZITADEL