Feature/717 read api

Do we want to `.trim()` the 2 parts to avoid possible problems if an `Authorization` header comes like `<key> : <signature>`