[WIP] Use request.headers to send auth_token