Fallback to default token authentication if header token not available