removed forced 401 to check alway headers