made the auth header name a const