updated fixtures, sans Auth header