some intial work on forcing auth header from loftili api connections