AuthN gets req header