add token support for authorization header fields