The X-Tomboy-Client header is sent twice to /api/1.0 - see attached screenshot.
Bug watches keep track of this bug in other bug trackers.