Switch to use of Bearer Token

* Switch to use `Bearer` `Authorization` strategy. This deprecates the use of `api_key` in the query string.
* Update the URL to remove the _version_ and to add the `/query` prefix.