Authorization token usage clarification

So you're setting the Authorizarion Header of the request like

Authorization: Bearer <the-token-value-from-the-cookie> or Authorization: Token <the-token-value-from-the-cookie>

that should work.