shock auth fix
more curl headers