update to auth header usage and user queries