add header and param auth strategy