+1 for `Authorization`. `accessToken` is specific to oauth. Also `Authorization` is the actual header that will be used.