adding support for the new auth header format and using it. untested