adding note about http header used for communicate with the authentication server