test request headers w/bearer token; fix extraction of params in GAPI.get/list/delete