Call API header name error: "not legal"

Check out this video and observe how the headers are set up for the authorization. I have a feeling you might be configuring it wrong.