Optional token will be sent back with the callback in Authorization header When creating the token, both 'type' and 'credentials' are required. Authorization: [type] [credentials], e.g. "Basic Rjc1234567890jdGMS00MUU01234567890I3OTUyRk1234567890UEB51234567890TM0NjM="