make sure we send GR-Authentication header in all api calls