#308 - fixing auth to use response header to use proper scheme