[api] allow an authHeader to be defined so we can override the default header used to authorize with the api