check authenticate header