implemented auth and custom headers