Properly set auth headers