Switch from cookies to headers for Meteor auth