added appid header verification