use auth_handler to specify host header value if possible