changed auth header parsing to work with current functional-site code