update request->auth-token to check for Token in the authorization header