update header on auth app