fix: retry must reset headers for re-auth