window location href with bearer token