Allow custom headers in auth request