Change authentication. Use request header instead.