add api authentication helper header