Switch to header authentication