diff --git a/frontend/src/pages/Analysis.jsx b/frontend/src/pages/Analysis.jsx
index 3838f06..ca9e734 100644
--- a/frontend/src/pages/Analysis.jsx
+++ b/frontend/src/pages/Analysis.jsx
@@ -150,8 +150,11 @@ export default function Analysis() {
   }
 
   const savePrompt = async (promptId, data) => {
+    const token = localStorage.getItem('bodytrack_token')||''
     await fetch(`/api/prompts/${promptId}`, {
-      method:'PUT', headers:{'Content-Type':'application/json'}, body:JSON.stringify(data)
+      method:'PUT',
+      headers:{'Content-Type':'application/json', 'X-Auth-Token': token},
+      body:JSON.stringify(data)
     })
     setEditing(null); await loadAll()
   }
@@ -356,9 +359,14 @@ export default function Analysis() {
                         {p.description && <div style={{fontSize:12,color:'var(--text3)',marginTop:1}}>{p.description}</div>}
                       </div>
                       <button className="btn btn-secondary" style={{padding:'5px 8px',fontSize:12}}
-                        onClick={()=>fetch(`/api/prompts/${p.id}`,{method:'PUT',
-                          headers:{'Content-Type':'application/json'},
-                          body:JSON.stringify({active:p.active?0:1})}).then(loadAll)}>
+                        onClick={()=>{
+                          const token = localStorage.getItem('bodytrack_token')||''
+                          fetch(`/api/prompts/${p.id}`,{
+                            method:'PUT',
+                            headers:{'Content-Type':'application/json','X-Auth-Token':token},
+                            body:JSON.stringify({active:p.active?0:1})
+                          }).then(loadAll)
+                        }}>
                         {p.active?'Deaktiv.':'Aktiv.'}
                       </button>
                       <button className="btn btn-secondary" style={{padding:'5px 8px'}}