send IndieAuth header