fix(contention): fix write contention in update_auth_headers and always ...

...return auth headers for robust client handling

see also: #51 

Not really sure how to properly test the concurrency issue. Let me know what you think, @lynndylanhurley!