We recently added methods to IOS[2] and Android SDK[1] in order to apply custom headers.
We always use recent user.token to apply for the header.

[1] https://github.com/aerogear/aerogear-android-sdk/blob/master/auth/src/main/java/org/aerogear/mobile/auth/AuthHeaderProvider.java#L30
[2] https://github.com/aerogear/aerogear-ios-sdk/blob/master/modules/auth/AuthHeaderProvider.swift#L20

In documentation we should provide this code snippets and say that this will allow to send the right token to server and authenticate users.
There is separate documentation for roles so this will be all.