added Secret headers to Backbone.sync