do not return auth-token header for batch requests. resolves #17