Right now I'm working in BasicAuth. If the request does not have both headers we do nothing.