Changed auth to header