API log-in via API key in Authorization header.