fixed X-Registry-Auth, now JSON and Base64