X-API-Token no longer included in authorisation calls. This means that authorisations are shared.