do not set auth header globally

also: no voting of own comments