Get email and token from HTTP headers