tokenType: "userSession" | "userBearer" | "saBearer"