S403 Token type is Bearer

What this test does

Checks token_type.

How it passes

token_type is "Bearer" (case-insensitive).

Specification

RFC 6749 §5.1

Needs

S402 Includes an access token