<feature/rest-activity-records> move auth token to header #144