fixed auth and header problems