Use `Authorization` header instead of query param | Vectle