add auth headers for polling commands and notifications