Authenticate REST calls with Authorization: Bearer <key> (or X-API-Key).
Authorization: Bearer <key>
X-API-Key