Request headers now supports HTTP auth