add userid to the auth header