3. Authenticate

Under Custom HTTP Headers, add one header:

Authorization: Bearer <token>

using the token from step 1.