Auth headers fixed