The header name should be in a def somewhere, as it's a magic string. Additionally, I'd suggest something like "HERMES-API-TOKEN" because"HERMES" means something and "X" does not.