anchor.diff:  - `Authorization` header, as `Authorization: Bearer <token>`
   - `access_token` query parameter, as `http://example.org/the/path/?access_token=<token>`
   
  -First, let's retrieve a fresh token, and extract the `access_token` field
  -
  -```
  -curl -X POST http://127.0.0.1:8080/auth/realms/stottie/protocol/openid-connect/token  -H "Content-Type: application/x-www-form-urlencoded" -d "username=rincewind" -d 'password=apiman' -d 'grant_type=password' -d 'client_id=apiman' | jsawk 'return this.access_token'
  +First, let's retrieve a fresh token from Keycloak, and extract the `access_token` field from the json using `jq` footnote:[We're going to use `jq` to select the `access_token` field in our JSON, so if you don't have `jq` installed you can use your package manager to get it: OS X Brew `brew install jq`; On Fedora `sudo yum install jq`; On Debian `sudo apt-get install jq`].
  +
  +```
  +curl -X POST http://127.0.0.1:8080/auth/realms/stottie/protocol/openid-connect/token  -H "Content-Type: application/x-www-form-urlencoded" -d 'username=rincewind' -d 'password=apiman' -d 'grant_type=password' -d 'client_id=apiman' | jq -r '.access_token'
   ```
   
   Second, we'll take the token and attach it to our request to the service
  
positive.code: 
  == Preparation
  
  For this example, let's assume we're using apiman's http://www.apiman.io/latest/download.html[quickstart] setup:
  
  ```ShellSession
  mkdir ~/apiman-1.1.3.Final
  cd ~/apiman-1.1.3.Final
  wget http://download.jboss.org/wildfly/8.2.0.Final/wildfly-8.2.0.Final.zip
  wget http://downloads.jboss.org/overlord/apiman/1.1.3.Final/apiman-distro-wildfly8-1.1.3.Final-overlay.zip
  unzip wildfly-8.2.0.Final.zip
  unzip -o apiman-distro-wildfly8-1.1.3.Final-overlay.zip -d wildfly-8.2.0.Final
  cd wildfly-8.2.0.Final
  ./bin/standalone.sh -c standalone-apiman.xml
  ```
  
  == Installing the Plugin
  
negative.code: [msavy@mmbp tmp]$ curl -k -H "Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJqdGkiOiJiNDY1YW..." https://127.0.0.1:8443/apiman-gateway/Newcastle/EchoService/1.0
  {
    "method" : "GET",
    "resource" : "/apiman-echo",
    "uri" : "/apiman-echo",
    "headers" : {
      "Authorization" : "Bearer eyJhbGciOiJSUzI1NiJ9.eyJqdGkiOiJiNDY1YWMzNi1hMTczLTRjOWMtYWJjZS00MzE2MJ...",
      "Host" : "127.0.0.1:8080",
  