remove the access token from API urls and put in Authorization header
Merge pull request #3441 from birarda/master

remove the access token from API urls and put in Authorization header