added the current auth_token in response header