Full review (do not merge)

Hmm, I see. You could hit that url with curl, where you can control your headers. Although if this is debug-only, I'd get rid of that api point completely.