We recently made a change to the Upspin wire protocol's authentication mechanism.
The upshot is that new servers are backward compatible with old clients, but new clients are now incompatible with old servers. You may see an "invalid auth request in header" when talking to an old server with a new client.
Please update your Upspin servers by sync'ing to the latest master revision and re-deploying.
Sorry for the inconvenience,
Andrew