adding the Bearer only to API requests

the header should not always include the bearer