Test for headers auth