@matzew  Yeah, it is mirroring what AG-controller was doing, but I think the Auth-Token header may be deprecated.  Do you know for sure?