Allow to provide token via x-obb-auth-token http header