Generate a Token, then send it as Authorization: Bearer in curl.
Authorization: Bearer
Each visit can mint a fresh key. Keys are shown once.