Add ORMS Auth Token to allowed headers