Add correct header to token verification response