turn auth headers back on