Use a function to get the token

More reliable: the header is not a string but a function, so right before sending the request, Angular will call `getToken` and get the token