fix a bug with headers
turned off debug and turned on auth