I created a sub request and forwarded the main request's header so the sub request get authenticated as well