Adde auth header to attachments