Don't set Authorization header unless token is not None
Do verify SSL certificates