Turns out I spelled Authorisation like that in my api request instead of Authorization (the American (wrong (but right in http)) way)