auth header needs to be an array. added todo to refactor for additional headers