fix auth request Content-Type header