API private token should be sent in the HTTP header

Created by: ghost

It should be possible to send the private token to authenticate in the api directly on the HTTP header. At the moment gitlab reads that only as parameter in the query string.