replaced form parameter with header for auth

i.e. `Authorization: Bearer ...`

it's possible that I'm Doing It Wrong though