Changed auth from using cookies to headers.