made wrap-authenticate more robust to blank query-params
authenticating all resources now