fixing auth headers