fix(client): let auth headers override request headers

fix(client): let auth headers override request headers #2707