fix X-Auth-Token header