mocking out _get_auth_header for assertion against request