v0.4.5 — Try authorize token for device writes

Attempt fix for 403 on control buttons: swap xlink authorize code into the Access-Token header for write operations. The user token is read-only; the authorize code from login may carry write permission.