Added token middleware to add X-Auth-Token header