Sent as Authorization: Bearer <token>. Stored only in this browser. Leave empty if the server runs without WA_API_TOKEN.
Authorization: Bearer <token>
WA_API_TOKEN