+ moved token to the header