Authentication Header pushes rules still not operational