DreamFactory doesn't require username and password in a header. To instantiate a session, you POST pre{"email":"email_value", "password":"password_value"}/pre and receive back a session_id, which you then pass as HTTP header preX-DreamFactory-Session-Token/pre...