Looks like this block is repeated a couple times. Any thoughts on moving this to the `auth_header` method to make things a little DRYer?