because the token value appears
in clear-text. Prefer using `authorization`.*

Deprecated: this will be removed in a future release.²