### Search before asking - [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar. ### What issue do you find in Pulsar docs? https://pulsar.apache.org/docs/4.0.x/client-libraries-websocket/#authentication ### What is your suggestion? suggest passing the token as headers rather than query parameters ### Any reference? _No response_ ### Are you willing to submit a PR? - [ ] I'm willing to submit a PR!