the important thing is to pass all the auth info in your header