Sorry @acornamr, this is actually the correct way to go about it with your token obtained at the /token
endpoint. The above is the way the browser authorizes the request with a cookie.
curl 'https://kc.kobotoolbox.org/api/v1/data.json' -H 'Authorization: Token <token>'