here is the auth header info