update for header xauth