auth/auth stuff working.. basic header processing etc