Can I use both Bearer token and cookie session? - Better Auth