add lego-token to header
store lego-token when logged in