Use request.headers to send auth_token