alternate authentication scheme to Authorization header

[urkle]

Browser-based Websocket implementations do not support sending an Authorization header thus making it impossible to attach to hookbot via a web application.

Can we tweak the authentication protocol to support either an Authorization header OR an initial authentication payload or a query parameter? more info