authentication: change apiRequestHeaders to SignedRequests