matching headers with spec when token is returned