I want to know if someone can help me with this. When using the API connector plugin, I am adding an access token as a header in a GET HTTP request dinamically, which means that I unthick the private thickbox. How do I ensure that the token is safely being added to the HTTP GET request? Is it possible for someone to sniff the token out of the request and affect the token owners?