Logging in and checking tokens works
working on the header