removed x-token header