API and client_id's

[BarryCarlyon]

An of course headers are not logged in history, and query string arguments are