Made the auth HTTP header configurable, along with specs.
minor code cleanup