almost done with S3 header based auth