adding token header