ie9 working
auth as a param instead of a header