add Auth header to all requests.  Needed to support private repos