changing authentication header