Change Strategy for accepting token from QueryString to header