edit auth header