Add X-Auth-Token header parsing to Token strategy