send the access token in a header @brianr