don't try to send empty auth headers
version bump