Make clientAuth header optional and log request