Include HTTP headers for Auth-Token on ag-controller-demo

Currently ag-demo is not following the same authentication conventions like TODO app has with Auth-Token

https://github.com/aerogear/TODO/blob/master/server/src/main/java/org/aerogear/todo/server/rest/AuthenticationService.java#L84

Would be nice to provide the same, once our client libraries are expecting it