commit with header access

http请求头做tokenid 认证。