Remove the HTTP_ from the authorization header