seperating server files and web files
factory module to insert auth header