diff --git a/apps/url-shortener/main.go b/apps/url-shortener/main.go
index 23365fd..ff87094 100644
--- a/apps/url-shortener/main.go
+++ b/apps/url-shortener/main.go
@@ -163,7 +163,7 @@
 	if !*requireAuth {
 		return anyUser, nil
 	}
-	if user := r.Header.Get("X-User"); user != "" {
+	if user := r.Header.Get("X-Forwarded-User"); user != "" {
 		return user, nil
 	} else {
 		return "", fmt.Errorf("unauthenticated")