also just cannot believe they put the twilio auth token in the body of an assistant-request from the phone number for inbound calls