Allow authorization from json parameters or headers
Allow auth to be passed in headers and json params.