adding client auth headers idapi calls