corrected Authentication header