How are API requests authenticated?

The Itemize API requires Basic Authentication on each request. The API token provided with each client account serves as the password field.  There is no username field, send an empty string or a space.  See example below - 

API token = ‘testing123’ transforms into  ‘:testing123’.  The header will be encoded as Authentication: Basic OnRlc3RpbmcxMjM=