Fixed auth header check