add authentification to header