added information about the affect of querystrings in the authentication headers