fixing a little issue and leaving commentrs
added header validation for email and password for token request