Revert "migrate to API-SECRET header"

Cherry-picked in the wrong order

This reverts commit 8e56ef17529f3867e0d907a81f95e40276814037.