no need to build auth header from scratch