Use sid header for authentication instead of cookie