Pass token as header