now i understand -auth was subtly the header also