diff --git a/server/documentation/api/authentication.rst b/server/documentation/api/authentication.rst
index 59586d6..ab9a15d 100644
--- a/server/documentation/api/authentication.rst
+++ b/server/documentation/api/authentication.rst
@@ -51,7 +51,7 @@ Authentication API
         POST /auth/bump HTTP/1.1
         Host: example.tld
         Accept: application/json
-        Authorization: Token <Base64(user:userToken)>
+        X-Auth-Token: <Base64(user:userToken)>
 
     **Example response**:
 
@@ -83,7 +83,7 @@ Authentication API
       POST /auth/logout HTTP/1.1
       Host: example.tld
       Accept: application/json
-      Authorization: Token <Base64(user:userToken)>
+      X-Auth-Token: <Base64(user:userToken)>
 
     **Example response**:
 
diff --git a/server/documentation/api/user.rst b/server/documentation/api/user.rst
index 856cde0..b6a1a87 100644
--- a/server/documentation/api/user.rst
+++ b/server/documentation/api/user.rst
@@ -12,7 +12,7 @@ User API
         GET /user HTTP/1.1
         Host: example.tld
         Accept: application/json
-        Authorization: Token <Base64(user:userToken)>
+        X-Auth-Token: <Base64(user:userToken)>
 
     **Example response**:
 
@@ -65,7 +65,7 @@ User API
         GET /user/corvus_administrator HTTP/1.1
         Host: example.tld
         Accept: application/json
-        Authorization: Token <Base64(user:userToken)>
+        X-Auth-Token: <Base64(user:userToken)>
 
     **Example response**:
 
@@ -107,7 +107,7 @@ User API
         PATCH /user/corvus_administrator HTTP/1.1
         Host: example.tld
         Accept: application/json
-        Authorization: Token <Base64(user:userToken)>
+        X-Auth-Token: <Base64(user:userToken)>
         Content-Type: application/json
 
         {
@@ -162,7 +162,7 @@ User API
         POST /user HTTP/1.1
         Host: example.tld
         Accept: application/json
-        Authorization: Token <Base64(user:userToken)>
+        X-Auth-Token: <Base64(user:userToken)>
         Content-Type: application/json
 
         {
@@ -212,7 +212,7 @@ User API
         DELETE /user/test_user HTTP/1.1
         Host: example.tld
         Accept: application/json
-        Authorization: Token <Base64(user:userToken)>
+        X-Auth-Token: <Base64(user:userToken)>
 
     **Example response**: