Found what was wrong :
in the primary request for obtaining a token, header returned was in lower-case : x-subject-token but for deleting it, it must be 'word capitalized' : X-Subject-Token