Our API standards require a Token header named `X-FreckleToken` to work properly. If I can extract the `project` value from the payload, then I'll use that. Thanks for the head's up.