FACTOR_BEARER

Also written: FACTOR_PASSWORD

An authority Spring Security 7 adds to record how you logged in: `FACTOR_PASSWORD` for a password, `FACTOR_BEARER` for a token. `/api/token` refuses `FACTOR_BEARER`, so a token can't mint more tokens.