Make authentication header enough even if there is a session.

Change-Id: Ib6123865f347cfcf4ff2779418492e3a34910bf4