fixes for auth header + client secret param + upped version number