added auth header functionality