auth header check fix