I see that these two headers are set only when there's an `Authorization` header present. Shouldn't the version be set at all times?