title: Basic HTTP and Bearer Token Authentication
body: <p>I am currently developing a REST-API which is HTTP-Basic protected for the development environment. As the real authentication is done via a token, I'm still trying to figure out, how to send two authorization headers.</p>
  
  <p>I have tried this one:</p>
  
  <pre><code>curl -i http://dev.myapp.com/api/users \
    -H "Authorization: Basic Ym9zY236Ym9zY28=" \
    -H "Authorization: Bearer mytoken123"
  </code></pre>
  
  <p>I could for example disable the HTTP-Authentication for my IP but as I usually work in different environments with dynamic IPs, this is not a good solution. So am I missing something?</p>