replaced uri auth with header auth