[SR-Users] Diversion header authentication