fix: properly attach auth headers after login
work in progress
fixes that don't involve current wip.
wip for profile, done