catch null auth header