remove header if no auth info; remove x-powered-by