Every request is authorized with your X-API-Key. Stored in a secure httpOnly cookie.