what is the header for the token ? - Better Auth