API cleanup for request authorization and Origin-header authorization