fixed authHeader