Conventional Bearer session management sends the secret token that proves the login to the server with each request. A typical Cookie-based session follows this model. Anyone who obtains a valid token ...