[HeavenFox]

It's part of the HTTP standard for `Authorization` header, and there is the possibility of some HTTP client / server breaking if you don't add it.

[tptacek]

Is there? If it's a custom token type, the serverside will never break with it. The client generally wants the caller to provide the "Bearer" string as well; can it break without it?