Issues with OAuth Bearer Token Validation When Using Keycloak for API Access