Added requirement for Authorization header