add authenticatino headers to all requests