added Authorization header for all requests