which properties are you hoping to set here?

If the bank account is tokenized before the auth header is passed through you're not going to get much data back. I think it would be better (in that case) to refresh the object itself

`curl https://api.balancedpayments.com/bank_accounts      -H "Accept-Type: application/vnd.api+json;revision=1.1" -d "routing_number=121000358"      -d "type=checking"      -d "name=Johann Bernoulli"      -d "account_number=9900000001"`

```json
{
  "bank_accounts": [
    {
      "href": "/bank_accounts/BA2cuiXQgYLTJsoEnWpWDSoU",
      "id": "BA2cuiXQgYLTJsoEnWpWDSoU",
      "links": {}
    }
  ],
  "links": {}
}
```

-versus when the auth header is passed-

`curl https://api.balancedpayments.com/bank_accounts      -H "Accept-Type: application/vnd.api+json;revision=1.1"      -u ak-test-231H3N1Sk3W0MdEHnAWOuFVfBvz8v3tdh:      -d "routing_number=121000358"      -d "type=checking"      -d "name=Johann Bernoulli"      -d "account_number=9900000001"`

```json
{
  "bank_accounts": [
    {
      "routing_number": "121000358",
      "bank_name": "BANK OF AMERICA, N.A.",
      "account_type": "checking",
      "name": "Johann Bernoulli",
      "links": {
        "customer": null,
        "bank_account_verification": null
      },
      "can_credit": true,
      "created_at": "2014-01-23T17:39:06.573948Z",
      "fingerprint": "5f0ba9fa3f1122ef13b944a40abfe44e7eba9e16934e64200913cb4c402ace14",
      "updated_at": "2014-01-23T17:39:06.573952Z",
      "href": "/bank_accounts/BA20y0FknZv30aojniO1GV5S",
      "meta": {},
      "account_number": "xxxxxx0001",
      "address": {
        "city": null,
        "line2": null,
        "line1": null,
        "state": null,
        "postal_code": null,
        "country_code": null
      },
      "can_debit": false,
      "id": "BA20y0FknZv30aojniO1GV5S"
    }
  ],
  "links": {
    "bank_accounts.credits": "/bank_accounts/{bank_accounts.id}/credits",
    "bank_accounts.bank_account_verifications": "/bank_accounts/{bank_accounts.id}/verifications",
    "bank_accounts.customer": "/customers/{bank_accounts.customer}",
    "bank_accounts.debits": "/bank_accounts/{bank_accounts.id}/debits",
    "bank_accounts.bank_account_verification": "/verifications/{bank_accounts.bank_account_verification}"
  }
}
```

As far as I'm aware balanced.js will not pass an auth header, however I don't fully understand the interactions between the browser and balanced.js in this case.