[Chris] Added authorisation function to check for the x-ticket header