code: def _setup_http_session(self):
          
          headers = {"Content-type": "application/json"}
          if (self._id_token):
              headers.update({"authorization": "Bearer {}".format(
                  self._id_token)})
          self._session.headers.update(headers)
          # TODO is this unsafe????
          self._session.verify = False
docs: Sets up the common HTTP session parameters used by requests.