Reading the authentication header instead of a query string