NOTE:	While never recommended by InEight for InEight applications, unmanaged (non-APIM) API requests only require the Authorization header.