code: @Override
      public boolean authorizeURLRequest(Request.Builder builder) {
          loadTokens();
          if (IDToken != null && !haveSessionCookie) {
              String auth = String.format(Locale.ENGLISH, "Bearer ", IDToken);
              builder.addHeader("Authorization", auth);
              return true;
          } else {
              return false;
          }
      }
docs: Auth phase (when we have the ID token):