Fixes for auth header checking.