set oauth header if token is provided