forgot the auth headers