Bug: Ensure Client.auth_header is always defined