Yes. I can see the token is in the request header