Is storing sensitive data in header is more secure than in payload?

Is storing sensitive data like token or username in header is more secure than payload in soap service and why?

Could you recommend the good approaches to implement web service security?