CF-Access-Client-Id and CF-Access-Client-Secret headers on every API call; - OR -CF_Authorization and pass that on subsequent API requests until the JWT times out at which point it will have to supply CF-Access-Client-Id and CF-Access-Client-Secret again to get a new JWT