Content-Type: application/json
Authorization: Bearer [your JSON web token]