Bearer token Apply Token kept in sessionStorage; cleared on tab close.