fixed bug related to added x-auth-token to the header of the request