formatting, if auth header is provided, do not try to resolve via other methods of authentication