YB #3 added support of security token in headers for async api