added X-Auth-Token header