got header token working