Prefer using 'Bearer' authorization rather than base64 encoded key

Also as per @wheresrhys's suggestion