#65: set default http headers to include the token