formatting, if auth header is provided, do not try to resolve via other ...

...methods of authentication