Fetch X-Spree-Token in request.headers

As that is where it's available rather than in request.headers.env