Use a correct auth token from header