adding getHeader() to auth manager