...
If the credentials are not correct, the API will return HTTP 401 Unauthorized.
Using a Session ID
The session id should be sent with each request in a custom HTTP header with the field name "X-MILK-SESSION-ID". The HTTP header field name is not case sensitive.
...