Fix request header for auth