fixed a little bit, some of the authenticator / header stuff