Thank you for your article, however why you did you use authorization header instead of cookies for transmitting the token?