Fix inadvertent revert of Auth-Token header to auth-Token header