Why does this production code work: `base64.b64decode(api_token.encode(“utf-8)).decode(“utf-8”)`