add authenticated user info to HTTP header