Add separate interface for authorized calls and switch to header-based authentication