Fix saving of in-app products (bug 1028976)

Trim the in-app product PK when pulling from the DOM. Set the
mkt-shared-secret prefix on the Authorization header.
Close #2251