user auth token in local storage in the request header instead of in the environment