HCSVLAB-416: Change token authentication to only accept token from request headers