Add test for auth header