Ok thanks @Six It is kinda weird that the Docs for New Api literally gives an example with "Authorization: OAuth "