#3 - implemented authentication through header token and added tests.