feat: do not send non-JWTs in Authorization
header
#584
+125
−19
Authorization
header
#584