A - removed auth check for header