I hope you've already invalidated that bearer token :-P

Of course.