feat: do not send non-JWTs in Authorization
header
#584
+132
−22
Authorization
header
#584