[minor] Also roll the tokens so our auth header get's set