Fixed header to allow Datatoken and Authorization