bug fix for auth headers