wam: fail closed on the ingest API, require a bearer token
wam: authenticate the ticket API with a shared bearer token