modified Authorization header format