Bots do not demonstrate security best practices

[benbrown]

The bot samples should demonstrate the bearer token being used to validate incoming requests.

This is currently poorly documented.

[D4yMan]

me want to help

[dafavio]

#165