Change authentication scheme to headers.