Very basic auth handling by adding a x-access-token header