[SR-Users] manipulate Authentication header