title: API request does not authenticate
body: <p>Using <a href="https://www.zoho.com/subscriptions/api/v1/#introduction" rel="nofollow noreferrer">this documentation</a> I'm trying to test the request using Postman the example on the right side:</p>
  
  <pre><code>$ curl https://subscriptions.zoho.com/api/v1/organizations
    -H 'Authorization: Zoho-oauthtoken 1000.41d9f2cfbd1b7a8f9e314b7aff7bc2d1.8fcc9810810a216793f385b9dd6e125f'
    -H 'X-com-zoho-subscriptions-organizationid: 10234695'
  </code></pre>
  
  <p>Maybe I'm not setting the parameters right but this is how it looks for the moment. </p>
  
  <p>A new GET Request, in the url input: <code>https://subscriptions.zoho.com/api/v1/organizations</code>
  And under that, in the Headers tab I added two key-value pairs: </p>
  
  <p><code>Authorization:</code>     <code>Zoho-oauthtoken 1000.41d9f2cfbd1b7a8f9e314b7aff7bc2d1.8fcc9810810a216793f385b9dd6e125f</code>
  <code>Authorization:</code>     <code>X-com-zoho-subscriptions-organizationid: 1023469</code></p>
  
  <p>The returned result:</p>
  
  <pre><code>&lt;html&gt;
  &lt;head&gt;&lt;title&gt;400 Bad Request&lt;/title&gt;&lt;/head&gt;
  &lt;body&gt;
  &lt;center&gt;&lt;h1&gt;400 Bad Request&lt;/h1&gt;&lt;/center&gt;
  &lt;/body&gt;
  &lt;/html&gt;
  </code></pre>
  
  <p>If I deleted the second key-value pair it returns this JSON:</p>
  
  <pre><code>{
      "code": 57,
      "message": "You are not authorized to perform this operation"
  }
  </code></pre>
  
  <p>What is wrong with my approach?</p>