Requests can now contain the token in the header