Authentication Header pushes rules not operational