Are you setting the generateGraphiQLHeader in your code? in development perhaps?
Did you generate it? If so, I suggest removing.
We’re going to remove generateGraphiQLHeader in favor of the redwoodJS Dev Studio.
Studio can to dbAuth impersonation currently and is the preferred method.