Add authorization header to response