Added in headers to auth_token call