I don't know if you have found a solution, but for anyone who stumbled upon this question looking for an answer, try to send the header as 'Authorization: JWT your_token'