fixed request token issue by extracting token from header