I pass an authorization token through the header. How can I handle it, transform it into user info, and use it in my tool functions