Bug 959441 - add X-Client-State header to tokenserver api; r=telliott