Fix how Authorization header is added