login working, auth header not

^