Mid REST API Client stores token (localStorage, cookies).? Client sends token in Authorization header: Authorization: Bearer <token>