added X-Auth header