Change auth code header param from Authentication to Authorization