* fix: api method name
+ send client headers with noauth request