fix: Move X-Api-Key to collection level, add Content-Type to each…

… request.

The headers `X-Api-Key:password` and `Content-Type` should be default for every request and therefore don't have to be added to each request individually.