fn authorization_header_value(token: &str) -> String
Suotar’s legacy study-registry path takes the token verbatim after the scheme word, not base64 of user:password.
user:password