auth header working, put in right handlers 1.00