FreeSHR server accepts requests that have an X-Auth-Token header set. Rejects (401) otherwise