add X-PAYPAL-AUTHORIZATION header