only send login header when not empty string