Validate data does not work when authentication is on

[inodb]

The API is used during validation. Need to add header when authorization is on. I'm not sure if the current solution is to use offline validation instead, but this seems more onerous for deployers/maintainers

Reported by @aiosa