Various cleanup for auth header docs and code